PT-2026-94603

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth component where hci setup sync queues a conn handle t with a NULL destroy callback. This leads to a memory leak if the entry is cancelled, as hci cmd syn...

CVE-2026-31499

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix deadlock in l2capconndel l2capconndel calls canceldelayedworksync for both infotimer and idaddrtimer while holding conn-lock. However, the work functions l2capinfotimeout and l2capconnupdateidaddr both acqui...

PT-2024-35685

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.12.0-rc4-00161-gae90f6a6170d Description A use-after-free vulnerability has been identified in the Linux kernel, specifically in the device for each child function. This issue can lead to a slab-use-after-free...

SUSE CVE-2021-3640

A flaw use-after-free in function scosocksendmsg of the Linux kernel HCI subsystem was found in the way user calls ioct UFFDIOREGISTER or other way triggers race condition of the call scoconndel together with the call scosocksendmsg with the expected controllable faulting memory page. A privilege...

PT-2022-36615

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.333 Description The issue is related to a use-after-free in the l2cap conn del function. This problem was introduced in version v4.9.326 and is fixed in version v4.9.333. The actual impact and attack...

PT-2022-36569

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.14.291 through 4.14.298 Description A use-after-free issue exists in the l2cap conn del function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 4.14.291...

UBUNTU-CVE-2022-3640

A vulnerability, which was classified as critical, was found in Linux Kernel. Affected is the function l2capconndel of the file net/bluetooth/l2capcore.c of the component Bluetooth. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The identifier of...

PT-2022-5266

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description The issue is related to the function l2cap conn del in the file net/bluetooth/l2cap core.c of the Linux Kernel's Bluetooth component. It involves the use of memory after it has been free...

PT-2025-8039

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.17.0-rc5 Description A use-after-free issue has been identified in the Linux kernel's Bluetooth functionality, specifically in the hci send acl function. This issue arises when the HCI EV DISCONN PHY LINK...

UBUNTU-CVE-2021-3640

A flaw use-after-free in function scosocksendmsg of the Linux kernel HCI subsystem was found in the way user calls ioct UFFDIOREGISTER or other way triggers race condition of the call scoconndel together with the call scosocksendmsg with the expected controllable faulting memory page. A privilege...